Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier: NONlxaOJ1fFYalBCetgqbuDtH7zkoLq66dICe3DQJrw=
Subject key identifier: E1:9D:06:AD:AC:71:4A:69:C6:D0:60:91:0A:A4:3A:DA:E2:E7:17:AA
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 0197B8903B999AA53D7E85DB96E2FEF3863E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number: 01D9
Signing time: Sat 28 Jun 2025 22:02:29 +0000
Manifest this update: Sat 28 Jun 2025 22:02:29 +0000
Manifest next update: Sun 29 Jun 2025 22:02:29 +0000
Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: Gv8yjJpb+QZ+Jcx1iVqsCw7tdSM/jwYAc+ta5+e2xcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:3b:99:9a:a5:3d:7e:85:db:96:e2:fe:f3:86:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Jun 28 22:02:29 2025 GMT
Not After : Jun 29 22:02:29 2025 GMT
Subject: CN=e19d06adac714a69c6d060910aa43adae2e717aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:4e:2a:d3:9b:ee:08:ee:87:2c:a4:9b:c9:
8c:8a:a6:13:0a:6d:da:3d:bc:21:70:97:a3:cf:58:
20:f2:a6:96:f5:83:78:d9:e5:4c:f1:5c:76:d0:ba:
4a:47:9a:92:19:61:02:83:d5:07:6a:d3:7d:f6:95:
72:23:86:e9:5c:58:de:d9:87:27:7f:1c:b8:18:73:
ef:36:29:e8:5f:ea:c7:a2:e7:86:6d:64:9d:55:71:
a8:f7:61:15:de:a3:2a:21:a7:da:25:0d:18:73:fe:
66:d5:d5:b3:26:09:95:ed:0b:bf:68:ca:9f:89:53:
2b:dc:fc:d9:3f:50:ad:f2:09:d1:f5:c5:1e:6c:3c:
22:1d:e7:71:79:f3:67:52:f9:26:25:e1:f5:c1:8c:
cd:2c:f0:5b:99:94:53:84:97:26:ff:1a:26:4e:aa:
54:ca:89:24:25:df:11:5a:79:79:df:4e:d0:20:9c:
92:cf:f2:e6:59:31:13:69:65:1d:12:83:12:52:db:
3c:25:7a:e8:ce:15:39:7f:13:8f:e7:9e:a8:b0:4d:
79:c2:a3:e6:3f:68:88:e6:b3:05:f1:2e:73:cd:06:
35:81:80:b9:1e:1b:8d:27:a4:17:35:75:a8:1b:fc:
38:36:ab:65:5e:5d:fe:3f:c5:3f:9e:f6:89:3a:b3:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:06:AD:AC:71:4A:69:C6:D0:60:91:0A:A4:3A:DA:E2:E7:17:AA
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ef:6c:0b:58:81:db:4c:1e:22:b4:c6:d5:38:58:ee:49:47:
a8:a2:9b:9a:d3:42:ce:bd:db:7f:98:d8:ee:ce:07:28:8a:9d:
f2:04:ad:5b:76:86:d5:c3:9e:23:48:b5:fd:c6:d6:a6:bd:8f:
e5:a1:17:55:29:df:9e:b6:ed:b3:1c:85:bd:06:f7:59:b4:52:
4a:e4:a0:b8:7f:88:be:63:d1:3d:48:97:b2:e1:e5:5d:ba:58:
0b:1f:06:9b:a9:8d:0b:75:9c:49:ff:dd:5b:2d:18:f4:93:ff:
4c:11:ca:8f:cb:e2:ca:20:3b:60:5e:9b:ab:ff:fd:e4:07:42:
22:c0:36:b5:29:2e:b3:b4:9e:f5:48:0b:c1:9c:55:7b:2a:e0:
f7:8a:ae:4c:ba:7b:37:31:14:73:71:98:b3:bb:ba:b2:81:3e:
ac:b3:ac:83:52:3c:8d:79:43:35:6c:ff:57:8b:07:69:b3:16:
be:ab:10:a0:64:28:43:e1:6b:11:3a:ef:98:38:b7:20:f0:5b:
6f:9c:99:c7:8a:db:96:08:87:70:3b:0c:a0:0e:ec:c2:4f:46:
99:d3:68:ac:37:d9:c4:68:04:af:08:c2:40:41:e1:f5:bc:d2:
c4:bb:5c:c6:6b:55:de:e2:05:78:bb:d6:2a:d5:4b:ce:7a:53:
86:15:65:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kDuZmqU9foXbluL+84Y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwN2ZhOThkNTIxZDg0YzI4ZGFlYzhhODlmNzQ4OGJiY2U4
MDAyMTUwHhcNMjUwNjI4MjIwMjI5WhcNMjUwNjI5MjIwMjI5WjAzMTEwLwYDVQQD
EyhlMTlkMDZhZGFjNzE0YTY5YzZkMDYwOTEwYWE0M2FkYWUyZTcxN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz5OKtOb7gjuhyykm8mMiqYTCm3a
PbwhcJejz1gg8qaW9YN42eVM8Vx20LpKR5qSGWECg9UHatN99pVyI4bpXFje2Ycn
fxy4GHPvNinoX+rHoueGbWSdVXGo92EV3qMqIafaJQ0Yc/5m1dWzJgmV7Qu/aMqf
iVMr3PzZP1Ct8gnR9cUebDwiHedxefNnUvkmJeH1wYzNLPBbmZRThJcm/xomTqpU
yokkJd8RWnl5307QIJySz/LmWTETaWUdEoMSUts8JXrozhU5fxOP556osE15wqPm
P2iI5rMF8S5zzQY1gYC5HhuNJ6QXNXWoG/w4NqtlXl3+P8U/nvaJOrNcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGdBq2scUppxtBgkQqkOtri5xeqMB8GA1UdIwQY
MBaAFPB/qY1SHYTCja7IqJ90iLvOgAIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMjVmODktNjM5Yi00ZjllLWFjOWQt
N2Q5MjhjMTMxNzI0LzEvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMjVmODktNjM5Yi00ZjllLWFjOWQtN2Q5MjhjMTMxNzI0
LzEvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhu9sC1iB
20weIrTG1ThY7klHqKKbmtNCzr3bf5jY7s4HKIqd8gStW3aG1cOeI0i1/cbWpr2P
5aEXVSnfnrbtsxyFvQb3WbRSSuSguH+IvmPRPUiXsuHlXbpYCx8Gm6mNC3WcSf/d
Wy0Y9JP/TBHKj8viyiA7YF6bq//95AdCIsA2tSkus7Se9UgLwZxVeyrg94quTLp7
NzEUc3GYs7u6soE+rLOsg1I8jXlDNWz/V4sHabMWvqsQoGQoQ+FrETrvmDi3IPBb
b5yZx4rblgiHcDsMoA7swk9GmdNorDfZxGgErwjCQEHh9bzSxLtcxmtV3uIFeLvW
KtVLznpThhVlwA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:21 2025 by rpki-client